feat(token)!: namespace server-attested private claims under JWT_PRIVATE_CLAIM_PREFIX#182

Merged

appleboy merged 16 commits intomainfrom

feat/jwt-private-claim-prefix

May 2, 2026

Commits on May 2, 2026

feat(token)!: namespace server-attested private claims under JWT_PRIVATE_CLAIM_PREFIX

appleboy
and
claude
committed
docs(token): use acme as the example prefix instead of mtk

appleboy
and
claude
committed
fix(token): reserve bare logical names to enforce hard cutover

appleboy
and
claude
committed
refactor(token): unexport private-claim registry and precompute strip list

appleboy
and
claude
committed
fix(token): close cross-prefix impersonation gap on custom-prefix deployments

appleboy
and
claude
committed
refactor(token): tighten reserved-list immutability and trust-level wording

appleboy
and
claude
committed
test(oidc): cover non-default prefix in discovery claims_supported tests

appleboy
and
claude
committed
refactor(config): test prefix collision via pure helper instead of global mutation

appleboy
and
claude
committed
refactor(services): cache normalized JWT_PRIVATE_CLAIM_PREFIX on TokenService

appleboy
and
claude
committed
docs(token): refresh stale comment references after prior renames

appleboy
and
claude
committed
refactor(config,token): unify empty-prefix semantics and harden ValidateExtraClaims

appleboy
and
claude
committed
fix(config): add cross-package drift guard and document default-prefix reservation

appleboy
and
claude
committed
fix(token): correct misleading strip-list comment and rename oidcStripKeys

appleboy
and
claude
committed
fix(token): use DefaultJWTPrivateClaimPrefix constant in test and fix slice capacity

appleboy
and
claude
committed
docs(config): clarify empty JWTPrivateClaimPrefix normalization in field doc

appleboy
and
claude
committed
docs(config): fix JWTDomain and JWTPrivateClaimPrefix field comments

appleboy
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(token)!: namespace server-attested private claims under JWT_PRIVATE_CLAIM_PREFIX#182

feat(token)!: namespace server-attested private claims under JWT_PRIVATE_CLAIM_PREFIX#182
appleboy merged 16 commits intomainfrom
feat/jwt-private-claim-prefix

Commits on May 2, 2026

feat(token)!: namespace server-attested private claims under JWT_PRIVATE_CLAIM_PREFIX

docs(token): use acme as the example prefix instead of mtk

fix(token): reserve bare logical names to enforce hard cutover

refactor(token): unexport private-claim registry and precompute strip list

fix(token): close cross-prefix impersonation gap on custom-prefix deployments

refactor(token): tighten reserved-list immutability and trust-level wording

test(oidc): cover non-default prefix in discovery claims_supported tests

refactor(config): test prefix collision via pure helper instead of global mutation

refactor(services): cache normalized JWT_PRIVATE_CLAIM_PREFIX on TokenService

docs(token): refresh stale comment references after prior renames

refactor(config,token): unify empty-prefix semantics and harden ValidateExtraClaims

fix(config): add cross-package drift guard and document default-prefix reservation

fix(token): correct misleading strip-list comment and rename oidcStripKeys

fix(token): use DefaultJWTPrivateClaimPrefix constant in test and fix slice capacity

docs(config): clarify empty JWTPrivateClaimPrefix normalization in field doc

docs(config): fix JWTDomain and JWTPrivateClaimPrefix field comments